disable dnssec in bind resolver

[Doug Barton]

On 06/05/10 07:22, Mark Andrews wrote:
> In message<4C09C562.7030204 at dougbarton.us>, Doug Barton writes:
>
> The resolver works.  It figures out that it can't make the new style
> queries and falls back to the old style queries.  If the user is really
> worried they can turn off EDNS and with that DO.

The OP's problem was that his firewall blocked anything with DO=1.

> It's still a handful of zones that are signed.

But isn't that what we're all working on changing? :)


Doug

-- 

	... and that's just a little bit of history repeating.
			-- Propellerheads

	Improve the effectiveness of your Internet presence with
	a domain name makeover!    http://SupersetSolutions.com/